Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/3138312e3233322e3235302e302f32332d3233203d3e20323731353431.roa
File:                     3138312e3233322e3235302e302f32332d3233203d3e20323731353431.roa (raw, json)
Hash identifier:          qog2BPfw40V0qD/wioceI+Y6mLUDR9sIyRJEKm5/rHM=
Subject key identifier:   B4:8D:B8:6C:31:92:6C:78:02:5C:A0:2E:33:0D:4E:33:85:EE:B1:A0
Certificate issuer:       /CN=85661D4BB5D0C9DD35FA91F11679E902EB66AF4D
Certificate serial:       4659CA928BFCF3DB83611540DC2EFA9F02C44E7B
Authority key identifier: 85:66:1D:4B:B5:D0:C9:DD:35:FA:91:F1:16:79:E9:02:EB:66:AF:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85661D4BB5D0C9DD35FA91F11679E902EB66AF4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/3138312e3233322e3235302e302f32332d3233203d3e20323731353431.roa
Signing time:             Tue 23 Jan 2024 21:46:24 +0000
ROA not before:           Tue 23 Jan 2024 21:41:24 +0000
ROA not after:            Tue 21 Jan 2025 21:46:24 +0000
asID:                     271541
IP address blocks:        181.232.250.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:59:ca:92:8b:fc:f3:db:83:61:15:40:dc:2e:fa:9f:02:c4:4e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85661D4BB5D0C9DD35FA91F11679E902EB66AF4D
        Validity
            Not Before: Jan 23 21:41:24 2024 GMT
            Not After : Jan 21 21:46:24 2025 GMT
        Subject: CN=B48DB86C31926C78025CA02E330D4E3385EEB1A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:21:e0:3c:6f:a5:e8:20:f5:cc:fc:7d:0a:9e:
                    88:20:1c:c4:60:5c:77:e2:b8:ac:b9:d0:bb:ae:c7:
                    a7:1a:b3:2d:7c:22:fd:5d:9b:4e:7c:e5:d0:de:e2:
                    a7:80:85:fb:67:bb:45:3b:aa:aa:1e:71:ba:65:9d:
                    b1:0c:6a:36:83:ba:82:54:6c:1b:9a:05:ec:5f:30:
                    04:e2:95:8d:0e:fc:fb:2a:e3:7e:13:3f:f5:47:fc:
                    38:37:01:56:6e:fd:ba:03:7f:36:b7:08:e7:6c:3b:
                    30:cf:37:f4:d9:0b:7e:30:8f:56:80:db:81:38:ef:
                    6a:8b:d0:52:42:09:36:38:e0:98:b6:f9:29:12:c4:
                    a8:c2:32:0b:6c:66:b1:8d:95:4a:79:9c:55:95:9f:
                    cd:fc:56:75:26:33:e3:e3:c5:f6:04:3e:91:b9:c4:
                    87:a8:bc:11:30:57:d3:62:82:ef:6b:ce:da:c2:97:
                    23:9c:bc:74:5c:cd:70:50:25:be:0c:17:06:7f:0f:
                    ec:67:f7:fd:9f:e7:f7:aa:64:94:a7:67:03:51:1a:
                    87:fe:de:26:86:71:51:46:70:4a:d0:07:98:58:88:
                    a7:d8:9d:5c:e6:3a:1a:bf:f1:4e:d3:a5:f2:7d:27:
                    ef:56:82:c9:a1:dc:cc:d1:c1:32:f6:5b:f4:13:41:
                    10:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8D:B8:6C:31:92:6C:78:02:5C:A0:2E:33:0D:4E:33:85:EE:B1:A0
            X509v3 Authority Key Identifier:
                keyid:85:66:1D:4B:B5:D0:C9:DD:35:FA:91:F1:16:79:E9:02:EB:66:AF:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/85661D4BB5D0C9DD35FA91F11679E902EB66AF4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85661D4BB5D0C9DD35FA91F11679E902EB66AF4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/3138312e3233322e3235302e302f32332d3233203d3e20323731353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d8:2d:2a:1a:30:a3:f8:a0:da:d2:fa:6d:3f:d9:78:81:fe:f1:
         34:9b:05:de:99:ac:00:24:79:56:2d:5d:7a:52:ac:85:50:f9:
         9a:fc:48:67:db:9f:98:9b:1a:f3:04:9e:d7:ef:e3:43:9e:ef:
         c2:18:8b:e5:2d:ef:11:42:97:65:f5:0a:b6:4a:04:cd:4f:65:
         52:4b:d0:62:75:32:71:83:a0:ca:3a:b0:45:27:3b:00:39:38:
         ad:79:71:e8:e6:3a:8f:f6:7e:f9:a8:b5:ac:da:b0:e1:6d:d2:
         fe:87:e0:30:11:c9:47:a4:e3:40:f7:e9:f1:f5:46:75:a1:e4:
         2f:1b:74:f7:42:5b:6e:62:bb:7d:07:28:f8:6f:bb:28:da:26:
         26:83:1f:21:9a:2d:70:65:c0:25:73:7c:0d:d0:aa:4d:62:1e:
         92:ca:7c:80:60:cc:b9:e8:05:b1:c0:5b:f1:9d:4f:b8:04:16:
         a0:cd:e1:bb:cd:86:2d:98:f4:57:51:2c:70:09:d9:41:5d:69:
         dd:9f:4e:c5:98:c8:77:08:96:50:45:b3:c9:48:2c:5d:39:57:
         bb:bf:06:72:bf:f2:8f:83:2c:3f:48:51:c4:cb:28:99:2e:72:
         d6:ba:da:8f:4c:06:c8:15:ba:24:10:31:07:69:4e:46:85:0c:
         5b:04:01:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:47 2025 by rpki-client